Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File:                     ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier:          BXhfuCI/4w5cP+tl+sdt9DUfVa/HnQGtIk7bvlaMYU4=
Subject key identifier:   63:F4:2C:25:46:1F:D6:B8:78:C4:AD:C5:44:14:A1:6B:46:F2:69:B1
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer:       /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial:       01974931743241B45B25F1037BFB835A90A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number:          056E
Signing time:             Sat 07 Jun 2025 07:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:07 +0000
Files and hashes:         1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
                          2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: 3+nx9oLjqcECPVVamJK65d7kRSP0m9AXP62fKQ214+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:74:32:41:b4:5b:25:f1:03:7b:fb:83:5a:90:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102bc98d33270952534130afb4de696d8c340215
        Validity
            Not Before: Jun  7 07:01:07 2025 GMT
            Not After : Jun  8 07:01:07 2025 GMT
        Subject: CN=63f42c25461fd6b878c4adc54414a16b46f269b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:01:de:2b:ad:8a:64:02:54:b9:56:54:74:
                    fe:c5:0f:18:cc:b3:d0:f0:ec:14:78:44:7e:83:5a:
                    00:fe:29:b1:dc:f4:f2:d4:83:be:1f:48:7a:ec:74:
                    68:f0:8a:c2:92:a3:74:a1:80:70:ef:d4:f2:92:16:
                    c1:32:8f:72:56:bc:00:40:d6:85:4c:f1:6b:71:16:
                    90:11:c5:19:f0:de:f4:0c:a2:42:f9:b8:6a:86:16:
                    e6:d9:24:8a:da:66:ec:60:03:f5:0a:21:81:24:f2:
                    0a:b2:4f:da:fb:de:c9:59:52:fd:70:59:88:63:3a:
                    cf:f1:e6:02:37:9b:90:3e:50:01:be:07:43:98:8c:
                    b6:88:68:36:bf:07:cc:73:ca:62:5e:97:ca:d3:05:
                    28:35:89:1b:64:dc:aa:f2:53:56:eb:ae:26:c1:f0:
                    d0:93:37:5b:20:cf:b9:9f:c9:6f:d7:17:a0:79:58:
                    b9:33:84:f1:bd:88:15:16:ad:08:bf:70:ca:b2:85:
                    c9:3c:9e:9b:2b:4a:c0:54:f3:39:7d:84:95:75:69:
                    02:f2:79:1a:d7:0b:74:ec:8e:41:08:24:60:0c:ba:
                    66:b2:53:6f:1c:b0:c6:9c:c0:d3:df:2b:02:40:1e:
                    ee:e4:4d:c3:57:77:2f:29:24:0c:82:89:10:56:11:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:2C:25:46:1F:D6:B8:78:C4:AD:C5:44:14:A1:6B:46:F2:69:B1
            X509v3 Authority Key Identifier:
                keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:e2:5c:1c:74:94:1a:4f:35:9d:ef:f0:e2:56:6a:b7:1a:
         d1:b0:af:26:6b:3b:11:61:03:57:1a:3e:ad:13:21:5b:e6:7b:
         6b:2e:f2:2f:be:0f:41:15:d2:31:68:82:00:3d:cd:95:fe:c1:
         81:46:f3:7a:3e:68:f6:7f:1c:4f:dd:eb:66:59:9e:31:4e:6f:
         f2:d1:6c:a1:33:1a:ca:48:ef:6a:3e:7b:2b:3a:73:81:6c:dc:
         00:be:c6:96:d4:71:05:55:d4:f2:d3:09:fa:e5:4a:74:98:26:
         90:18:5b:49:45:10:bb:e3:76:5f:3c:73:5a:8b:2e:4c:f8:9c:
         1a:a7:55:b2:0f:2c:4a:40:b2:2a:59:76:4c:49:00:b2:d8:c5:
         3e:ce:09:6b:f9:2c:9a:b3:1b:a4:bc:be:a4:73:8a:8b:af:08:
         4e:c9:21:8a:c5:28:f3:65:5d:60:5a:37:cc:de:4f:cf:2b:06:
         f5:8c:1a:97:31:a0:d2:ef:ce:bf:b2:5f:55:0e:24:ec:bb:e2:
         a0:76:0c:4a:b9:f6:48:b2:a3:6f:23:9a:52:b7:6f:17:14:fc:
         30:72:46:62:e9:4c:b1:a0:fb:2a:70:c6:c7:20:38:53:5d:9c:
         9a:ac:50:d3:e1:f8:ed:b0:1f:18:0d:0e:37:87:b7:01:f5:ff:
         4e:e8:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:26 2025 by rpki-client